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Abstract. The so-called light logics 1 131 [1] [2] have been introduced as logical systems 
enjoying quite remarkable normalization properties. Designing a type assignment system 
for pure lambda calculus from these logics, however, is problematic, as discussed in jB]. In 
this paper we show that shifting from usual call-by-name to call-by-value lambda calculus 
allows regaining strong connections with the underlying logic. This will be done in the 
context of Elementary AfRne Logic (EAL), designing a type system in natural deduction 
style assigning EAL formulae to lambda terms. 



The so-called light logics [131 E 12] have been introduced as logical counterparts of com- 
plexity classes, namely polynomial and elementary time functions. After their introduction, 
they have been shown to be relevant for optimal reduction [10\ lllj. programming language 
design [21 [16j and set theory [15]. However, proof languages for these logics, designed 
through the Curry-Howard correspondence, are syntactically quite complex and can hardly 
be proposed as programming languages. An interesting research challenge is the design 
of type systems assigning light logics formulae to pure lambda-terms, forcing the class of 
typable terms to enjoy the same remarkable properties which can be proved for the logical 
systems. The mismatch between /3-reduction in the lambda-calculus and cut-elimination 
in logical systems, however, makes it difficult to both getting the subject reduction prop- 
erty and inheriting the complexity properties from the logic, as discussed in [6J. Indeed, 
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/3-reduction is more permissive than the restrictive copying disciphne governing calcuh di- 
rectly derived from hght logics. Consider, for example, the following expression in Ala 
(see [IS]): 

let M be Ix in N 

This rewrites to N{x/P} if M is IP, but is not a redex if M is, say, an application. It 
is not possible to map this mechanism into pure lambda calculus. The solution proposed 
by Baillot and Terui [6] in the context of Light Affine Logic (LAL, see [HE]) consists in 
defining a type-system which is strictly more restrictive than the one induced by the logic. 
In this way, they both achieve subject reduction and a strong notion of polynomial time 
soundness. 

Now, notice that mapping the above let expression to the application 

{Xx.N)M 

is not meaningless if we shift from the usual call-by-name lambda calculus to the call-by- 
value lambda calculus, where {\x.N)M is not necessarily a redex. In this paper, we make 
the best of this idea, introducing a type assignment system, that we call ETAS, assigning 
formulae of Elementary Affine Logic (EAL) to lambda-terms. ETAS enjoys the following 
remarkable properties: 

• The language of types coincides with the language of EAL formulae. 

• Every proof of EAL can be mapped into a type derivation in ETAS. 

• (Call-by-value) subject reduction holds. 

• Elementary bounds can be given on the length of any reduction sequence involving a 
typable term. A similar bound holds on the size of terms involved in the reduction. 

• Type inference is decidable and the principal typings can be inferred in polynomial time. 
The basic idea underlying ETAS consists in partitioning premises into three classes, de- 
pending on whether they are used once, or more than once, or they are in an intermediate 
status. We believe this approach can work for other light logics too, and some hints will be 
given. 

The proposed system is the first one satisfying the above properties for light logics. A 
notion of typability for lambda calculus has been defined in [lO ^llll lT] for EAL, and in [4J for 
LAL. Type inference has been proved to be decidable. In both cases, however, the notion 
of typability is not preserved by /3-reduction. 

Noticeably, the proposed approach can be extended to Light Affine Logic and Soft 
Affine Logic (SAL, see [3111]). 

A preliminary version of the present paper is [9]: here some results have been improved. 
In particular a new type inference algorithm is presented, and its complexity is analyzed: it 
turns out that our type inference algorithm for EAL has a complexity of the same order than 
the type inference for simple types. Moreover some discussions about possible extensions 
of this method have been added. 

The paper is organized as follows: in Section [2] a comparison with existing work is 
made, in Section [3] some preliminary notions about EAL and lambda calculus are recalled, 
in Section d] the ETAS system is introduced, and in Section [5] and [6] its main properties, 
namely complexity bounds and a type inference algorithm, are explained. Section [7] presents 
two possible extensions, allowing to reach completeness for elementary functions, and in 
Section [8] some hints on how to apply our idea to other light logics are given. Section [9] 
contains a short summary of the obtained results. 
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2. Comparison with Existing Work 

This work is not the first contribution on type systems derived from light logics. We 
should mention works on (principal) type inference for Elementary Affine Logic and Light 
AfHne Logic by Baillot, Coppola, Martini and Ronchi Delia Rocca [101 HI [H]- There, the goal 
was basically proving decidability of type inference. The proposed type systems were the 
ones directly induced from logical systems. Typable lambda terms can be efficiently reduced 
using Lamping's abstract algorithm, although basic properties like subject reduction and 
complexity bounds were not necessarily verified. 

Baillot and Terui [6j proposed a type system inspired by light logics and enjoying sub- 
ject reduction and polynomial time normalization, called Dual Light Affine Logic (DLAL). 
The underlying term system is ordinary lambda-calculus with usual, call-by-name reduc- 
tion. They've recently proved [3] that system F terms can be decorated with light types in 
polynomial time, following similar work for Elementary Affine Logic [7J. 

Our approach should be understood as complementary to the one proposed by Baillot 
and Terui [6j: we exploit call-by- value evaluation and this allows us to stay closer to logical 
systems. On the other hand, the way our type system is formulated prevents us from getting 
the full power of second-order quantification. Nevertheless, second-order quantification is 
not as crucial with call-by-value as with usual call-by-name, where data can be encoded in 
Church-style, following Berarducci and Bohm [8]. 

3. Preliminaries 

In this section we recall the proof calculus for Elementary Affine Logic, A^'^. Then 
relations with the lambda calculus will be discussed. 

Definition 3.1 (Terms, Types, Contexts). 

i) The set A of terms of the lambda calculus is defined by the grammar M ::= x \ MM \ 
Xx.M, where x € Var, a countable set of variables. 

ii) The grammar generating the set A^''^ of terms of the Elementary Lambda Calculus 
{EA-terms for short) is obtained from the previous one by adding rules 

M::=!(M) /x, . . . ,^ /x] \ [M]M=.,y 

and by constraining all variables to occur at most once. These two constructs interpret 
promotion and contraction, respectively. 

iii) EA-types are formulae of (Propositional) Elementary Affine Logic (hereby EAL), and 
are generated by the grammar A ::= a \ A —o A \ \A where a belongs to a countable 
set of basic type constants. EA-types will be ranged over by A, B, C. 

iv) EA-contexts are finite subsets of EA-type assignments to variables, where all variables 
are different. Contexts are ranged over by ^. If $ = {xi : Ai,...,Xn '■ A^}, 
then dom{^) = {xi, . . . ,Xn}- Two contexts are disjoint if their domains have empty 
intersection. 

v) The type assignment system in natural-deduction style for EA-terms (I~neal for short) 
assigns EA-types to EA-terms. The system is given in Table [TJ With a slight abuse of 
notation, we will denote by NEAL the set of typable terms in A^''^. 

Both A^^ and A are ranged over by M, N,P,Q. The context should help avoiding ambigui- 
ties. Symbol = denotes syntactic identity on both types and terms. The identity on terms is 
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$ hwEAL M -AA X -AA, y AA Kneal N : B 

A ^-r- r—. C 



X : j4 I-|\ieal X : a $, ^ I~neal [N]M=x,y '■ 

B 

: A Kneal M : B $ ^neal M : A ^ B ^ Kneal N : A 



^ ^NEAL Ax.M : A ^ B ^ hiMEAL M N : B 

^iNealMi:!Ai •■■ ^n^NEALMn:!^ ANNEAL 

hNEAL!(iV) [^Vxi,...,^"/a;n] ■\B 



Table 1: Type assignment system for EA-terms. Contexts with different names are intended 
to be disjoint. 



{Xx.M N) M{N/x} 

!(M)[^^Vxi, • • • ,KiV)riM,...,^-M /^.^ . . . M„ /^^j 

!(M{iV/x,})rVxi, • • • /j/i, • • • /y^, ■ ■ /xn] 

([M]mi=xi,x2 iV) ^@_c [(MK/xi, 4/0:2} iV)]Mi=,.;,4 

(M [iV]jVi [(M Ar{x'i/a;i,4/ar2})]ivi=a;' 4 

W\N\p=y^^y^=xi,X2 ^c-c [[^]iVK/2/i,2/^/2/2}=xi,a;2]p=2/i,2/^ 

Ax.[M]iv=y,z ^A-c [\x.M]N=y,z where x ^ FV(A^) 
where A4' in the — ^dup-rule is obtained from M replacing all its free variables with fresh 
ones (xj is replaced with y,); x'^ and x'2 in the ^@_c-rule, y' and z' in the ^i-c-rule and 
y'^ , ^2 in the — ^c-c-rule are fresh variables. 



Table 2: Normalization rules in A^'^. 

taken modulo names of bound variables and modulo permutation in the list ^ /x, - ■ ■ , ^/x 
inside !(M) [^/x, . . . , ^/x]. 

On A, both the eall-by-name and the call-by-value /3-reduction will be used, according 
to the following definition. 
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Definition 3.2 (Reduction). 

i) We refer to the contextual closure of the rule {Xx.M)N ^nM{N/x}, where M{N/x} 
denotes the capture free substitution of N to the free occurrences of x in M, as the 
call-by-name f3 -reduction; 

ii) Values are generated by the grammar V ::= x \ Xx.M where x ranges over Var and 
M ranges over A. V is the set of all values. Values are denoted by V, U, W. The 
call-by-value /3-reduction is the contextual closure of the rule {Xx.M)V -^y M{V/x} 
where V ranges over values. 

iii) Let t € {n, v}; symbols -^f and —^^ denote the transitive closure and the symmetric 
and transitive closure of — respectively. 

A term in A^''^ can be transformed naturally to a term in A by performing the substitutions 
which are explicit in it, and forgetting the modality !. Formally, the translation function 
(•)* : A^^ ^ A is defined by induction on the structure of EA-terms as follows: 

(x)* = X 

{Xx.M)* = Xx.{M)* 

(MN)* = {M)*{N)* 

i[M]N=.„.,r = iMniNr/xi,iNr/x2} 

(!(iV)[*^Vxi,...,^"/^n]r = (iVr{(Mi)7xi,...,(M„)7x„} 

where M{*^i/j;i, • • • ,^"/xn} denotes the simultaneous substitution of all free occurrences 
of Xi by Mj (1 < i < n). 

The map (•)* easily induces a type-assignment system NEAL* for pure lambda-calculus: 
take NEAL and replace every occurrence of a term M by M* in every rule. Normalization in 
NEAL(see Table [2]), however, is different from normalization in lambda-calculus — NEAL* 
does not even satisfy subject-reduction. Moreover, lambda calculus does not provide any 
mechanism for sharing: the argument is duplicated as soon as /3-reduction fires. This, 
in turn, prevents from analyzing normalization in the lambda calculus using the same 
techniques used in logical systems. This phenomenon has catastrophic consequences in the 
context of Light Affine Logic, where polynomial time bounds cannot be transferred from 
the logic to pure lambda-calculus [6j. 

Consider now a different translation (•)'^ : A^^ —>■ A: 

(x)* = X 
(Xx.M)* = Xx.{M)* 

(MN)* = (M)* (N)* 

,r . _ j {N)*{M/x,M/y} if M is a variable 

i[iVjM=z,yj - I (Xz.iN)#{z/x,z/y}){M)# otherwise 



{N)* ifn = 

(!(iV) [*^Vx2,...,*^V^n])#{Mi/xi} 
if n > 1 and Mi is a variable 

(Axi.(! (N) [*^VX2, . . . , )#)(Mi)# 
if n > 1 and Mi is not a variable 
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Please observe that while (•)* maps [N\M=x,y and ! (A'") [-^i/a;i, . . . , ^"/x^] to applications 
(except when the arguments are variables), (•)* maps them to terms obtained by substitu- 
tion. Indeed, if lambda calculus is endowed with ordinary /^-reduction, the two translations 

are almost equivalent: 

Lemma 3.3. For every EA-term M, (M)# (M)*. 

Proof. By induction on M. □ 

However, it is certainly not true that (M)^ (M)*. The map (•)^, differently from 
(•)*, does not cause an exponential blowup on the length of terms. The length L(M) of a 
term M is defined inductively as follows: 

L{x) = 1 

L{Xx.M) = 1 + L{M) 

L{M N) = 1 + L{M) + L{N) 

The same definition can be extended to EA-terms by way of the following equations: 

L(!(M)) = L{M) + 1 

L(!(M)[^Vxi,...,^V^n]) = L(!(M)[^7xi,...,^"-Vx„_i]) + L(M„) + l 

L{[MU=x,y) = L{M) + L{N) + 1 

Proposition 3.4. For every N G A^^, L{N*) < 2L{N). 

Proof. By induction on A^. The cases for variables, abstractions and applications are trivial. 
Let us now consider the other two inductive cases. Suppose = [P]Q=x,y If Q is a 
variable, then L{N*) = L{P*) < 2L{P) < 2L{N). If Q is not a variable, then L{N*) = 
L{P*) + L{Q*) + 2 < 2L{P) + 2L{Q) + 2 = 2(L(P) + L{Q) + 1) = 2L(iV). If, on the other 
hand, N =! (M) [^^/xi, . . . , , then we can proceed by induction on n. If n = 0, then 

the inequality is trivially verified. If, on the other hand, n > 0, then we must distinguish 
two different cases: if M„ is a variable, then the inequality is trivially satisfied; if is not 
a variable, then N* is (Aa;„.(! (M) [^V^^i; • • • , -^""Va^n-i] and, by the induction 

hypothesis on n and M„, we get 

L{N*) = 2 + L((!(M)[^Vxi,...,^»-Vx„_i])#) + L(M#) 

< 2 + 2L(! (M) [^7x1, . . . ,^"-Vx„_i]) + 2L(M#) 
= 2L(iV) 

This concludes the proof. □ 



4. The Elementary Type Assignment System 

In this section we will define a type assignment system typing lambda-terms with EAL 
formulae. We want the system to be almost syntax directed, the difficulty being the handling 
of C and ! rules. This is solved by splitting the context into three parts, the linear context, 
the modal context, and the parking context. In particular the parking context is used to 
keep track of premises which must become modal in the future. 

Definition 4.1. 

i) An EAL formula A is modal if A =\B for some B, it is linear otherwise. 
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r,x:y4|A|ehx:yl ^ r|A|x:^,ehx:^ ^ 

T,x : A\ A\eh M : B ^ T \ A, x : A \ O h M : B 

r I A I e h Xx.M :A^B r | A | 9 h Xx.M : A ^ B 

ri|A|ehM:^^5 r2|A|ehiV:yl 



ri,r2 1 A I e h M : 5 

Ti I Ai I ei h M : A 

r2 |!ri,!Ai,!ei,A2 1 Q2^M:\a 



E. 



Table 3: The Elementary Type Assignment System (ETAS). Contexts with different names 
are intended to be disjoint. 

ii) A context is a set of pairs x : A where x is a variable and A is an EA-type, where 
all variables are disjoint. A context is linear if it assigns linear E A- types to variables, 
while it is modal if it assigns modal EA-types to variables. If $ is a context, and 

denote the linear and modal sub-contexts of respectively. 

iii) The Elementary Type Assignment System (ETAS) proves statements like F | A | h 
M : A where T and Q are linear contexts and A is a modal context. The contexts have 
disjoint variables. The rules of the system are shown in Table [3l In what follows, T, A 
and will range over linear, modal and parking contexts respectively. 

iv) A typing judgement for M is a statement of the kind T \ A \ 9 \- M : A. A term M € A 
is EA-typable if there is a typing for it. Type derivations built according to rules in 
Table [3] will be denoted with greek letters like vr, p and a. If tt is a type derivation with 
conclusion T | A | 6 h M : A, we write tt : T \ A \ Q \- M : A. 

Rules A^ and A^ (see Table [3]) are two variations on the classical axiom rule. Notice that 
a third axiom rule ^ 

r 1 X ■.\A,A \ ehx:lA ^ 

is derivable. Abstractions cannot be performed on variables in the parking context. The rule 
is the standard rule for application. Rule ! is derived from the one traditionally found 
in sequent calculi and is weaker than the rule induced by NEAL via (•)*. Nevertheless, it is 
sufficient for our purposes and (almost) syntax-directed. The definition of an EA-typable 
term takes into account the auxiliary role of the parking context. 

Example 4.2. Let us illustrate the roles of the various ETAS rules by way of an example. 
Consider the Church's numeral 2 = Xx.Xy.x{xy), let B be \{A ^ A) and C he B ^ B. A 
type derivation for 2 is the following: 

y : A -^A I I h w : A -« A 

aP ! ' I 

I y : B I a; : C h a; : C 9 \ y: B \ x : C \- y : B 



y:B\x:C\-xy:B ll) \ y : B \ x : C \- x : C 

E- 



y: B \ x :C\- x{xy) : B 



1 1 s : C h Xy.x{xy) 


: B - 


o B 


1 x :!C 1 h \y.x{xy) : 


{B- 





I I I- \x.\y.x{xy) :!C -^\C 



\ 
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Call this type derivation Tr{2,B). But Church numerals can be typed slightly differently. 
Consider the term 3 = Xx.Xy.x{x{xy)) and the following type derivation (where D stands 
for A A): 

9\0\x: Dhx: D y: A \ \ x : D h y: A ^ 

y : A\fli\x : D'r xy : A I I a; : i3 h x : D 

■ — ■ ■ — ■ 

y : A\0\x : DV- x{xy) -.A % \ \ x : D ^ x : D 

y : A I I a; : D h x{x(xy)) ■ A ^ ^ 
I I a; : D h Xy.x{x{xy)) : D 
I s : B I h Xy.x{x{xy)) : B ' ^ 
I I h Xx.Xy.x{x(xy)) : C 

This is 7r(3, A) This way we can give the application 2 3 the type !C. 

This system does not satisfy call-by-name subject-reduction. Consider, for example, 
the lambda term M = {\x.yxx){wz). A typing for it is the following: 

y -AA ^\A ^ A,w:A z : ^ | | h M : A 

M -^n N, where N = y{wz){wz) and y :IA ^\A ^ A,w : A ^\A, z : ^ | | 1/ iV : A, 
because rule requires the two linear contexts to be disjoint. Note that both | | y : 
lA ^\A ^ A,w : A ^lA, z : A h M : ^ and I I y ^\A ^ A,w : A ^\A, z : A \- 
N : A, but these are not EA-typings. 

The subject reduction problem, however, disappears when switching from call-by-name 
to call-by-value reduction. 

Lemma 4.3 (Weakening Lemma). If it : Ti | Ai \ Qi \- M : A, then there is a : Ti,T2 \ 
Ai, A2 I Qi,Q2 ^ M : A, for every T2, A2, @2 disjoint from each other and from Ti, Ai, Qi. 
Moreover, the number of rule instances in a is identical to the number of rule instances in 

TT. 

Lemma 4.4 (Shifting Lemma). If t: : T,x : A \ A \ @ \- M : B, then there zs a : F | A | 
X : A,Q \- M : B . Moreover, the number of rule instances in a is identical to the number 
of rule instances in vr. 

Lemma 4.5 (Substitution Lemma). Suppose Ti and T2 are disjoint contexts. Then: 

i) If IT : Ti,x : A \ A \ Q h M : B and a : T2 \ A \ Q ^ N : A, then there is 
p:Ti,T2\ A\&h M{N/x} : B. 

ii) If IT : T \ A \ X : A,e \- M : B and a : 9 \ A \ Q \- N : A, then there is p : T \ A \ & h 
M{N/x} : B. 

iii) If IT : Ti \ A, X : A \ e \- M : B , a : T2 \ A \ Q \- N : A and N £ V , then there is 

p : ri,r2 1 A I e h m{n/x} b. 

Proof. The first point can be easily proved by induction on the derivation for Fi, a; : A | A | 
Q \- M : B using, in particular, the Weakening Lemma. 

Let us prove the second point (by the same induction). The case for A^ can be proved 
by way of the previous lemmas. I^ and iL^ are trivial. comes directly from the 

induction hypothesis and Lemma 14.31 ! is trivial since x cannot appear free in M and so 
M{N/x} is just M. 

The third point can be proved by induction, too, but it is a bit more difficult. First of 
all, observe that A must be in the form !...! C, with n > 1. Let us focus on rules E^ and ! 
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(the other ones can be handled easily). Since N £ V, the derivation for r2 [ A | h : yl 
must end with A^, , or iL^ (depending on the shape of N), followed by exactly n 
instances of the ! rule, being it the only non-syntax-directed rule. If the last rule used in vr 
is E^, then vr has the following shape: 

(j) :T3\x : A,A\Qh L : D ^ B : T4 \ x : A, A \ Q h P : D 
Tilx: A,A\eh M : B 
where Fi = Fa, r4 and M = LP. a can be written as follows: 

e : Ts I Ai I 61 h iV : C 

r2 1 A I e h iV : ^ 

where A =!r5, !Ai, A2 and A =\C. From ^ we can obtain a derivation x : | A | h 
: A and applying (two times) the induction hypothesis, we get |U : | A | B h L{N/x} : 
D ^ B and : r4 | A | G h P{N/x} : D from which we get the desired p by applying rule 
and Lemma 14.31 If the last rule used in vr is !, then vr has the following shape: 

</> : I Ai I Gi h Af : C 
Ti\x: A,A\eh M : B 
where x:A,A =!r3, !Ai, !Gi, A3 and B =IC. a can be written as follows: 

: r4 I A2 I G2 H iV : D 
r2 I A I Q h iV : ^ 

where A =!r4, !A2, !G2, A4 and A =\D. We now distinguish some cases: 

• If x G dom{A3), then x ^ FV{M) and p is obtained easily from (p. 

• If X G dom{Ai), then let Ai = x : D,A^. By applying several times Lemma 14.31 and 
Lemma 14.41 we can obtain type derivations 

^ : 0|x:Z),A2UA5 |r3Ur4UQiUG2HM:C 

X : I A2 U A5 I r3 U r4 U Gi U G2 H iV : L> 

which have the same number of rule instances as and tp, respectively. By applying point 
ii) of this Lemma, we obtain 

;U : I A2 U A5 I r3 U r4 U Gi U G2 H M{N/x} : C 

from which p can be easily obtained. 

• If 2; G dom(Gi), then let Gi = x : D,G3. By applying several times Lemma 14.31 and 
Lemma 14.41 we can obtain type derivations 

i : I Ai U A2 I X : L>, U r4 U G2 U G5 H M : C 

X ■■ I Ai U A2 I r3 u r4 U G2 U G5 h iV : D 

which have the same number of rule instances as (f) and ip, respectively. By applying the 
inductive hypothesis, we obtain 

;U : I Ai U A2 I r3 U r4 U G2 U G5 H M{N/x} : C 

from which p can be easily obtained. 

• If X G dom (r3), then let r3 = x : D^T^. By applying several times Lemma 14.31 and 
Lemma 14.41 we can obtain type derivations 

C : I Ai U A2 I X : L>,r4Ur5UGi UG2 H M : C 
X : I Ai U A2 I r4Ur5 U Gi UG2 H iV : L> 
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which have the same number of rule instances as (f) and V', respectively. By applying the 
inductive hypothesis, we obtain 

/X : I Ai U A2 I r4 U Ts U Gi U 02 h M{N/x} : C 

from which p can be easily obtained. 

This concludes the proof. □ 

Theorem 4.6 (Call-by- Value Subject Reduction). T | A | 6 h M : ^ and M N implies 
r I A I G h iV : ^. 

Proof. A redox is a term of the shape {Xx.M')N' , where N' G V. Then it can be the subject 
of a subderivation ending by an application of the rule {E^) immediately preceded by an 
application of rule (/^). So the result follows by the Substitution Lemma. □ 

We are now going to prove that the set of typable A-terms coincides with (NEAL)#. To 
do this we need the following lemma. 

Lemma 4.7 (Contraction Lemma). 

i) IfT\A\x:A,y:A,QhM:B, then T | A | z : ^,G h M{z/x,z/y} : B 

ii) IfT\x:A,y:A,/^\Q^M:B, then V\z: A,/^\Q^ M{z/x, z/y} : B 

Theorem 4.8. 

i) If ^ ^NEAL M : A then $^ | | h {M)# : A. 

ii) // r I A I h M : A, there is N e A^^ such that (7V)# = M and T, A Hneal N : A. 
Proof. 

i) By induction on the structure of the derivation for $ I^neal M : A. Let us focus on 
nontrivial cases. 

If the last used rule is E^, the two premises are $ Hneal N : B ^ C and $2 I~neal 
P : B, and M = NP. By induction hypothesis, $f | | h (iV)# : B ^ C, and 
$^ I I h (P)# : B and, by Weakening Lemma, | | h {N)* : B ^C, 

I <^>^ I h (P)# : B Rule E_^ leads to the thesis. 

If the last used rule is C, the two premises are $1 Hneal N -.lA and ^2,x y : 
^■A l-NEAL P : B. By induction hypothesis, $f | $( | h {N)* -.lA, <^>^ \ ■.\A,y : 

!y4 I h (P)# : By Contraction L 

so $2 ! '^'2 I ^ ^ .{P)"^ {z / X , z / y} -.lA B By rule E^ and Weakening Lemma, we 
finally get $[,^>|' | | h {Xz .{P)* {z / x , z / y]){N)* : 

ii) The following, stronger, statement can be proved by induction on tt: if tt : F | A | xi : 
Ai, . . . , x„ : ^„ h M : A, then there is A?^ G A^^ such that 

M = {N)*{x\/y^, . . . , x^M, . . . , xl/yn, x^-/yn} 

andr,A,yi : Ai, . . . , y^^ : ^1, . . . , : . . . , y^" : An ^neal A^ : A □ 

We have just established a deep static correspondence between NEAL and the class of ty- 
pable lambda terms. But what about dynamics? Unfortunately, the two systems are not 
bisimilar. Nevertheless, every call-by-value reduction-step in the lambda calculus corre- 
sponds to at least one normalization step in A^^. A normalization step in A^^ is denoted 

by denotes the transitive closure of — >. 

An expansion is a term in A^''^ that can be written either as ! (M) [^^/yi, . . . , ^"/yn] or 
as [N]z=.j:,y, where N is itself an expansion. 



LIGHT LOGICS AND THE CALL-BY- VALUE LAMBDA CALCULUS 



11 



Lemma 4.9. If M is an expansion, then 

• [L]M=x,y ^* P, where P* = L{M* /x,M# /y}; 

• IfM = Pi, then I (L) [^'/xi, . . . /x„] ^* Q where 

Q* ^ (! (L) [^Vxi, . . . , ^-Vx,_i/>+7x,+i, . . . , ^V^n] )*{M#/x,}. 

Proposition 4.10. For every M G A^^, ifT Hneal M : A and (M)# -^^ N, then there is 
L G A^^ such that (L)# = N and M ^+ L. 

Proof. We can proceed by induction on tlie structure of M. If M is a variable, then 
is a variable, too, and so the premise is false. If M is an abstraction, then the thesis 
follows from the inductive hypothesis. If M is an application P Q, then we can assume 
P to be an abstraction Xx.R and to be R^{Q'^ /x} (in all the other cases the thesis 
easily follows by induction hypothesis). It is easy to see that R^{Q'^ /x} = (i?{Q/x})* 
and so we can take R{Q/x} as our L. If M is ^ and Q is not a variable (otherwise 

the thesis easily follows by inductive hypothesis), then = [Xz.P'^lz/x, z/y})Q'^ and 
we can restrict to the case where is P"^ {Q"^ / x , Q"^ / y} . First of all, we can observe 
that must be an abstraction. This means that Q is an abstraction itself enclosed in 
one or more ! (•) [^^ /yi, ■ ■ ■ j^^/yn] contexts and zero or more [•]2=x,j/ otherwise M cannot 
be typed in EAL. This means Q is an expansion and so, by Lemma 14.91 we know there 
must be a term R such that R# = P*{(5*/a;, and M — >* R, that is the thesis. 

! (P) ['^i/xi, . . . , /xn] can be managed in a similar way. □ 

Remark 4.11. Notice that Proposition 14.101 is not a bisimulation result. In particular, 
there are normalization steps in NEAL that do not correspond to anything in ETAS. An 
example is the term {Xx.x){yz), which rewrites to yz in NEAL but is a (call-by-value) normal 
form as a pure lambda-term. 



5. Bounds on Normalization Time 

In order to prove elementary bounds on reduction sequences, we need to define a refined 
measure on lambda terms. We can look at a type derivation 7r:r|A|OI-M:^asa 
labelled tree, where every node is labelled by a rule instance. We can give the following 
definition: 

Definition 5.1. Let vr : L | A | G h M : ^. 

i) An occurrence of a subderivation /) of vr has level i if there are i applications of the rule 
! in the path from the root of p to the root of vr. 

ii) An occurrence of a subterm of M has level i in vr if z is the maximum level of a 
subderivation of vr corresponding to the particular occurrence of A'^ under consideration 
(and thus having A^ as subject). 

iii) The level ^(vr) of tt is the maximum level of sub derivations of vr. 

Notice that the so defined level corresponds to the notion of box-nesting depth in proof- 
nets [IJ. 

Example 5.2. Consider the derivation 7r{2,B) from Example 14. 2 i All the occurrences of 
rules inside ir{2,B) have level 1, since there is one instance of ! in the path joining the 
root of tt{2,B) to them. The occurrence of rule A^, on the other hand, has level 2. As a 
consequence all occurrence of variables in 2 have either level 1 or level 2 in ■7r{2,B). Now, 
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consider the (unique) occurrence of \y.x{xy) in 2. There are two distinct sub derivations 
corresponding to it, one with level 0, the other with level 1. As a consequence, the level 
of Xy.x{xy) in tt(2,B) is 1. Since the maximum level of sub derivations of 7t{2,B) is 2, 
d{7r{2,B)) = 2. 

The length L{M) of a typable lambda term M does not take into account levels as 
we have just defined them. The following definitions reconcile them, allowing L{M) to be 
"split" on different levels. 

Definition 5.3. Let vr : T | A | G h M : A. 

i) S{'7T, i) is defined by induction on vr as follows: 

• If TT consists of an axiom, then ^(Tr, 0) = 1 and ^(vr, z) = for every i > 1; 

• If the last rule in tt is li^ or it^, then S'(7r,0) = S{p,Q) + 1 and S{7r,i) = S{p,i) for 
every i > 1, where p is the immediate subderivation of vr; 

• If the last rule in vr is then ^(Tr, 0) = S{p, 0) + S{a, 0) + 1 and ^(vr, i) = S{p, i) + 
S{a,i) for every i > 1, where p and a are the immediate sub derivations of vr; 

• If the last rule in vr is !, then S'(7r,0) = and S{TT,i) = S{p,i — 1) for every i > 1, 
where p is the immediate subderivation of vr. 

ii) Let n be the level of vr. The size of vr is S'(vr) = J2i<n ^('^^ 

Example 5.4. Consider again vr(2,S). By definition, 5(vr(2,5),2) = 1, S'(vr(2, 5), 1) = 5 
and S{tt{2,B),0) = 1. 

The following relates ^(vr) to the size of the term vr types: 

Lemma 5.5. Let tt : T \ A \ Q h M : A. Then, S{tt) = L{M). 

Substitution Lemma can be restated in the following way: 

Lemma 5.6 (Weakening Lemma, revisited). // vr : Fi | Ai \ Qi \- M : A, then there is 
p : Ti,T2 [ Ai, A2 \ @i,@2 ^ M : A. such that S{tt, i) = S{p, i) for every i. 

Lemma 5.7 (Shifting Lemma, revisited). // vr : F, a; : ^ | A | h M : i?, then there is 
p : T \ A \ X : A, Q \- M : B such that S{tt, i) = S{p, i) for every i. 

Lemma 5.8 (Substitution Lemma, revisited). 

i) // vr : Fi,x : yl I A I e h M : /): F2 I A I G h iV : ^ and G V, then there is 
a : Fi,F2 | A | G h M{N/x} : B such that S{a,i) < S{p,i) + ^(vr, i) for every i. 

u) If TT : T \ A \ X : A,Q \- M : B, p : i/} \ A \ e \- N : A and N £ V, then there is 
0- : F I A I G h M{N/x} : B such that S{a,i) < S{TT,0)S{p,i) + 5(vr,i) for every i. 

iii) If TT : Ti \ A,x : A \ e \- M : B, p : T2 \ A \ Q \- N : A and N e V, then 
there is cr : Fi, F2 [ A | h M{N/x} : B such that S{a,0) < S{tt,0) and S{a,i) < 
{Y.j<iS(.T^,3))S{p,i) + 5'(vr,i) for every i>l. 

Proof. For each of the three claims, we can go by induction on the structure of vr. Here, we 
do not concentrate on proving the existence of a (it follows from lemma 14. Sp but on proving 
that a satisfies the given bounds. We implicitly use Lemma 15.61 and Lemma 15.71 without 
explicitly citing them. Let us first analyze the claim i). We will prove by induction on vr that 
S{cr,i) < 5(/7, i) min{l, ^(vr, 0)} + S'(vr,i) for every i (observe that ^(yO, i) min{l, S'(vr, 0)} + 
'S'(vr, i) < S{p, i) + S{tt, i). tt is just an axiom, then a is obtained from p by the weakening 
lemma and the bound holds. If the last rule in vr is I^^ {!!-<,) 1 then a is obtained by using 
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the inductive hypothesis on the immediate premise ^ of tt obtaining ^ and then applying 
{li^) to ip. In both cases 

S{a,0) = S(V',0) + l<5(p,0)min{l,5((^,0)} + S(</),0) + l 

< 5(p,0)min{l,S(7r,0)} + 5(7r,0) 
Wi>l.S{a,i) = S{i;,i)<S{p,i)mm{l,S{(l),i)} + S{4>,i) 

< 5(/9,0)min{l,5(7r,i)} + 5(7r,i) 

If the last rule in tt is E^, then a is obtained by using the inductive hypothesis on one of 
the immediate premises ^ of tt obtaining ijj, applying to ip and the other premise ^ of 
TT. We have: 

S{a,0) = S(V;,0) + 5(e,0) + l 

< S{p, 0) min{l, S{4>, 0)} + S{4>, 0) + S{t 0) + 1 

< 5(p,0)min{l,5(7r,0)} + S(7r,0) 
yi>l.S{a,i) = S{ip,i) + S{^,i) 

< S{p, i) min{l, S{<P, i)} + S{^, i) + S{C, i) 

< S{p,i)'nim{l,S{TT,i)} + S{TT,i) 

If the last rule in tt is !, then a is just obtained from tt by weakening lemma, because x 
cannot appear free in M. The inequality easily follows. 

Let us now prove point ii). If tt is jiist an axiom, wc can proceed as previously. If the 
last rule in tt is /£o {li-o)^ then p is obtained as in point i) and, in both cases: 

S{a,0) = S{'ilj,0) + l<S{p,0)Si(P,0)+S{(l),0) + l 

< 5(/),0)5(7r,0) +5(7r,0) 
Vi>1.5(c7,i) = S{'4),i) < S{p,i)S{<p,0) + S{(j),i) 

< S{p,i)S{7r,0)+S{TT,i) 

If the last rule in tt is E^, then a is obtained by using the inductive hypothesis on both the 
immediate premises (f) and tp oi tt obtaining ^ and % and applying E^ to them. We obtain: 

S{a,0) = S{^,0) + Six,0) + 1 

< {S{p, O)S(0, 0) + S{cl>, 0)) + {S{p, Q)S{^, 0) + 0)) + 1 

< Sip, 0) is{<p, 0) + Siij, 0) + 1) + (5(<^, 0) + S{ip, 0) + 1) 
= S{p,0)S{tt,0) + S{7r,0) 

yi>l.S{a,i) = S{^,i) + S{x,i) 

< {S{p, i)S{cl>, 0) + S{<p, i)) + {Sip, i)S{iP, 0) + i)) 
= Sip, i) (5(0, 0) + Si^P, 0) + 1) + {S{cp, ^) + 5(V, i)) 

= Sip,i)SiTr,0)+Si7r,i) 

If the last rule in tt is !, the a is again obtained by tt and the inequality follows. 

Let us now prove claim iii). Notice that the last rule in p must be ! rule, because A is 
modal and AT is a value. If the last rule in tt is it^ {lL>): then a is obtained in the usual 
way and: 
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S{a,0) = 5(V', 0) + 1 < 0) + 1 = 5(7r, 0) 
yi>l.S{a,i) = Si^|;,^)<Sip,^){Y^S{c^>,j)) + S{c|>,i) 

j<i 

= S{cl>,i){J2S{^J))+S{7T,i) Vi>l 

If the last rule in vr is E^, then we apply the inductive hypothesis to the immediate premises 
(p and ip oi IT and to a type derivation which is structurally equivalent to p. We obtain ^ 
and X apply E-o to them, obtaining a type derivation which is structurally equivalent 
to the desired a. Now we have: 

S{a,0) = 5(^,0) + 5(x,0) + l< 5(0,0) + S(^,0) + l = 5(7r,0) 

yi>l.S{a,i) = S{ti) + S{x,i) 

< Sip,i)iY, SicPJ)) + Sicl>,i) + Sip,i)iY, Sii^J)) + 5(^,i) 

= S{p,i){^{S{cl>,j) + S{i;,j))) + S{<l>,i) + S{^p,i) 
= 5(p,i)(^5(7r,j)) + 5(7r,i) 

j<i 

If the last rule in tt is !, then we can suppose the last rule in p to be a ! and let ^ be the 
immediate premise of p. We first apply the induction hypothesis (or one of the other two 
claims) to the immediate premise (p of it and to tp obtaining ^; then, we apply rule ! to ^ 
and we get a. Clearly, S{a, 0) = by definition. For every i > 0, we have that 

S{C,i)<{^S{^,j))S{^,i) + S{<p,i) 

j<i 

independently on the way we get ^. Indeed, 

min{l,§(0,i)}5(V',i)+5(</>,i) < (^ 5(</>,i))5(V, i) + 5(</>, i); 

j<i 

S{cf>,0)S{i;,i)+S{<f>,i) < C£S{cl>,j))S{^,i) + S{<f>,i). 

j<i 

As a consequence, for every i > 1, 

Sia,i) = S{^,i-1)<{Y. Sicj>,j))S{i;,i-l) + S{cP,i-l) 

j<i-l 

< iY^Si7r,j))S{p,i)+S{7:,i) 

j<i 

This concludes the proof. □ 
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The following can be thought of as a strengthening of subject reduction and is a corollary 
of Lemma 15.81 



Proposition 5.9. // vr : F | A | h M : and M — by reducing a redex at level i in 
TT, then there zsp:r|A|0|-A^:yl such that 

\/j<i.S{p,j) = S{Tr,j) 

S{p,i) < S{TT,i) 

yj>i.S{p,j) < S{7r,j){^Si7r,k)) 

Proof. Type derivation p is identical to vr up to level i, so the equality S{p,j) = S{TT,j) 
holds for all levels j < i- At levels j > i, the only differences between p and vr are due to the 
replacement of a type derivation (j) for {Xx.L)P with another type derivation for L{P/x}. 
tp is obtained by Lemma [5.81 The needed inequalities follow from the ones in Lemma [5. 81 □ 

If vr is obtained from p by reducing a redex at level i as in Proposition 15.91 then we 
will write vr — p. Consider now a term M and a derivation vr : F | A | h M : 
A. By Proposition 15.91 every reduction sequence M —^^ N -^^ L -^^ . . . can be put in 
correspondence with a sequence tt — s-^ p — >i a — >J; . . . (where p types A^, a types L, etc.). 
The following result give bounds on the lengths of these sequences and on the possible 
growth during normalization. 

Proposition 5.10. For every c? € N, there are elementary functions fd,gd : N — > N such 
that, for every sequence 

vro vri -^i' 712 

it holds that 

• For every i € N, Ee<d •S'l^Ti, e) < /^(^(vro)); 

• There are at most gd{S{T^o)) reduction steps with indices e < d. 

Proof. We go by induction on d and define fa and g^ such that the given inequalities hold 
and, additionally, fd{n) > n for each n G N. /o and go are both the identity on natural 
numbers, because S'(7ro,0) can only decrease during reduction and it can do that at most 
5(7ro,0) times. Consider now d>l. Each time S{ni,d) grows, its value goes from S{Tri,d) 
to at most Si^TTi, d){S{Tri, d) + fd-i{S (ttq))) , because by Proposition 15.91 it can grow to, at 
most S{iTi,d){Y^j^^^S{7ri,k)) and, by inductive hypothesis 

^S{Tri,k) = Si7T,,d)+ J2 S{n„k)<S{7ri,d) + fd-i{S{no)). 

k<d k<d-l 

We claim that after having increased n times, S{TTi,d) is at most {fd~i{S{TTo)) + n)'^"'^^ . 
Indeed, initially 

S{7r,,d) < S{no,d) < S{no) < {fd-i{S{7ro))f 
And, after n > 1 increases, 

< ifd-iiSino)) + n)2"((/,_i(5(^o)) + n- if" + (/d-i(S(^o)) +n- if"") 

< ifd^SiTTo)) + n)2"((/,_i(5(7ro)) + n - 1 + l)^"-^)^ 
= (/,_i(5(7ro))+n)2"+' 
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From the above discussion, it foUows that the functions 

fain) = fd-i{n) + {fd-i{S{no))+gd-i{n)f'-''"'^' 

9d-\{n) 

9d{n) = gd^i{n) + ^ ifd-iiSiiTo)) + 

are elementary and satisfy the conditions above. This concludes the proof. □ 

Theorem 5.11. For every d E N there are elementary functions Pd,Qd : N — > N such that 
whenever tt : T \ A \ @ \- M : A, the length of call-by-value reduction sequences starting 
from M is at most Pqi^^'j{L{M)) and the length of any reduct of M is at most qg(^j^-j{L{M)) . 

Proof. This is immediate from Proposition 15.101 □ 



6. Type Inference 

We prove, in a constructive way, that the type inference problem for ETAS is decidable. 
Namely a type inference algorithm is designed such that, for every lambda term M it 
produces a principal typing from which all and only its typings can be obtained by a 
suitable substitution. The substitution is a partial function, defined if it satisfies a set of 
linear constraints. If there is not a substitution defined on its principal typing, then M is 
not typable. We will also prove that the computational complexity of the type inference 
procedure is of the same order as the type inference for simple type assignment system. 

The design of the algorithm is based on the following Generation Lemma. 

Lemma 6.1 (Generation Lemma). Let L | A | h Af -.A. 

i) Let M = X. If A is linear, then either {x : A} C r or {x : A} C Q. Otherwise, 
{x:A}e A. 

ii) Let M = Xx.N. Then A is of the shape IJ^iB C) (n > 0). 

n 

• Letn = 0. // B is linear then T,x : B \ A \ Q h N : C, else T \ A,x : B \ e h N : C. 

• Let n > 0. Then ^ \ A \ % ^ M : A and V \ A' \ Q' N : C , where A = 

^((r'uA'ue')-{x:B}). 

n 

iii) Let M = PQ. Then A is of the shape !...! B {n > 0), Ti \ A' \ O' h P : C ^ !...! B 

n m 

and r2 I A' I O' h Q : C, for some m < n. 

(a) Ifn-m = 0, then L = Li U A = A' and Q = 9'. 

(b) lfn-m>0, then | A | h M : ^, where A = ^lJ^{Ti U Fa U A' U 9'). 

The principal typing is described through the notion of a type scheme, which is an extension 
of that one used in [11] in the context of A^''^ and NEAL. Roughly speaking, a type scheme 
describes a class of types, i.e. it can be transformed into a type through a suitable notion 
of a substitution. 

Definition 6.2. 
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i) Linear schemes and schemes are respectively defined by the grammars 

fj, ::= a \ a —o a 
a ::=/x |!V 

where a belongs to a countable set of scheme variables and the exponential p is defined 
by the grammar 

p ::= a \ p + p 

where a ranges over a countable set of literals. Linear schemes are ranged over by v, 
schemes are ranged over by a, r, p, exponentials are ranged over by p, q, r and literals 
are ranged over by a, b. 

Note that the grammar does not generate nesting exponentials, i.e., \P\'^a is not a 
correct scheme, while I'^^'^a is correct. 

ii) A modality set is a set of linear constraints in the form either p = q or p > or p = 0, 
where p and q arc exponentials. Modality sets are ranged over by C. 

iii) A type scheme is denoted by a \c, where a is a scheme and C is a modality set. Type 
schemes will be ranged over by (, 6. Let T denote the set of type schemes. 

iv) <7 \c denotes the simple type skeleton underlying the type scheme a \c, and it is defined 
as follows: 

a \c = a; 
a ^ T \c = \c ^ r \c 
\Pa \c = cr \c 



v) A scheme substitution S* is a partial function from type schemes to types, replacing 
scheme variables by types and literals by natural numbers, in such a way that con- 
straints in C are satisfied. If p is an exponential, let S{p) be the result of applying 
the scheme substitution S on all the literals in p, e.g. if p coincides with ai + ... + a„, 
then S{p) is S{ai) + ... + ^(a^). C is satisfied by S if, for every constraint p = q 
{p>0,p = 0) in C, S{p) = S{q) {S{p) > 0, S{p) = 0) Clearly the solvability of a set of 
linear constraints is a decidable problem. The application of a substitution S satisfying 
C to a type scheme a \c is defined inductively as follows: 

S{a \c) = A if [a ^ ^] G 5; 

S{a ^t\c) = S{a \c) ^ Sir \c) ; 

Si\Pfi\c)=l^S{fi\c) ±f p = ai + ... + am 

n 

n = S{ai) + ... + S{am). 
If C is not satisfied by S, then S{a \c) is undefined. 

Binary relation = is extended to denote the syntactical identity between both types, 

schemes and type schemes. Making clear what we said before, a type scheme can be seen 
as a description of the set of all types that can be obtained from it through a scheme 
substitution defined on it. 

A substitution is a total function from type schemes to type schemes mapping scheme 
variables to schemes, and generating some constraints. A substitution is denoted by a pair 
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U{a \c,a fc') = ([],0) 

a does not occur in a 
U{a \c,(T \c') = {[a ^ a]. 

a does not occur in a 

U{a \c,a \c') = {[a ^ a], 

U{a^T\c.v\c') = {s,C") 
U{a^T\c,\'^iy \c>) = {s,C"\j{q = d},) 



(C/1) 



C/(!P// IccJ^T \c') = {s, C" U{p = 0}) 
U{fi tc,^ \c') = {s,C") 



U{Vfi Icl'^i^ \c') = {s,C"U{p = q}) 



(f/6) 



U{ai \c,n \c') = (si,Ci) 

^((^l,Cl)(^2 \c)AsuCi)iT2 \C')) = {S2,C2) 

U{ai 0-2 ten T2 \c') = (si.C'i) o (■S2,C'2) 

(si, Ci) o (s2, C2) is the substitution such that 
{si,Ci) o (s2,C2)(a \c) = (s2,C2>((si,Ci)(a \c)). 



Table 4: The unification algorithm U 

{s,C), where s is a function from scheme variables to schemes and C is a modality set. 
Substitutions will be ranged over by t. The behaviour of {s, C) is defined as follows. 

(s, C)(a \c') = <y \cyjC' if [a ^ o"] G s; 

(s, C){a^T \c') = cj' ^t' \c" if {s, C){cj \c') = g' rc" 

and (s,C"")(t fc") = t' \c"\ 

{s,C){Vfi \a) =?u if (s,C)(/x tc) = ^ \c"; 

(s,C)(!V b') =!'^ rc"u{r=p+,} if b') =!^i^ • 

Note that the last rule is necessary in order to preserve the correct syntax of schemes, where 
the nesting of exponentials is not allowed. 

In order to define the principal typing, we will use a unification algorithm for type 
schemes, which is a variant of that defined in [11]. Let =e be the relation between type 
schemes such that a \c=e t \c' if o" |"c = t \c- 

The unification algorithm, which we will present in Table [U in Structured Operational 
Semantics style, is a function U from T x T to substitutions. 

The following lemma proves that the function U supplies a more general unifier for 
two type schemes, in two steps: the substitution it generates is the most general unifier 
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with respect to the relation =e, and moreover there is a most general scheme substitution 
unifying the two type schemes modulo the syntactic equivalence =. 

Lemma 6.3. 

i) (correctness) U{a \c-,t \c') = (•5,C") implies {s,C"){a \c) = cr' \c"', (■5,C"')(t \c') = 
t' \c"" where a' fc""=e t' \c"" ■ Moreover for every scheme substitution S, defined on 
both the type schemes, S{a' \c'") = S{t' \c"")- 

ii) (completeness) S{a \c) = S{t \c') implies U{a \c-,t \c') = {s-,C") and there is S' 
such that, for every type scheme Q, S{Q = S"((s, C")(C)), for some S' . 

Proof. 

i) Easy, by induction on the rules defining U{a |"c,r \c')- 

ii) By induction on the pair (n, m), where n and m are respectively the number of scheme 
variables occurring in both cr and r and the total number of symbols of a and r. 

Let a = a, and let S{a \c) = S{t \c') = A; clearly either r = a or a cannot occur 
as proper subterm of r. In the first case U{a tcjO \c') = a-iid S = S' . In the 

second case U{a Ic^t \c') = {[(^ ^ Then every scheme substitution S", solving 

both C and C and acting as S on all the scheme variables occurring in a and r but a 
does the desired job. 

Let a = ai ^ a2 and r = n ^ T2. So S{ai 02 \c) = S{ai \c) S{a2 \c), and 
S{ti ^ T2 \c') = S{ti \c') S{t2 \c')- So by induction U{ai Icn \c') = {si,Ci), 
(si,Ci)(cri \c) = cr' \c[ and (si,Ci)(ti \c') = t' fq/ where a' \c[=e t' \c'^. Moreover 
there is such that S{a2 \c) = 5'i((si, Ci)(ct2 \c)) and S{t2 \c') = 5'i((si, Ci)(t2 \c' 
)). In case si is not empty, the number of scheme variables in both the type schemes 
is less than in a and r; otherwise their total number of symbols is less than the one in 
a and r. In both cases we can apply the induction hypothesis and conclude the proof. 
All the other cases follow directly from the induction hypothesis. □ 

The principal type scheme of a term is a pair in the form (S; Q, where S is a scheme 
context (i.e., a set of assignments of the shape x : 6, where no variable is repeated), and C 
is a type scheme. 

In order to simplify the text of the algorithm, we will use the following conventions: 

• Let o" be a scheme, l^a denotes in case cr = fi, ffi, where r = p-\- q in case a =\''fj-; if 
C = cr \c, then \P( denotes l^a \c', 

• Let S be a scheme context. I^'S denotes the scheme context {x | a; : (" E S}. 

The principal type scheme algorithm is defined in Table O 

Theorem 6.4 (Type Inference). 

i) (correctness) If PT{M) = {Ti,0 then for every scheme substitution S defined on all 
the type schemes occurring in PT{M), 3T,A,Q partitioning S{Ti) s.t. F [ A | h M : 

siC). 

ii) (completeness) IfT\A\Q\-M: A then PT[M) = oind there exists a scheme 
substitution S defined on all the type schemes occurring in PT{M) such that 5'(S) C 
ruAuG andA = S{C,). 

Proof. 
i) By induction on M. 

• M = X. Then PT{M) = {{x :\°'a fg}; \°'a Every scheme substitution S satisfies 
the empty set of constraints. 
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. PT{x) = {{x -A-a k}, l-a 

• PT{Xx.M) = let PT{M) = (E,cr \c) in 

if X doesn't occur free in M 

else 

let S = {a; : T \c'} U E' in 

if X occurs multiple times in M 

let U{t \{a>o}) = {si,Ci) in 

let (si,Ci)(r \c')=t' \c" and 
{si,Ci){a \c) = cr' \c"' in 
((si,Ci)(!^E'),!^T'^a') \c"uc"') 

else 

(!»E',!-(T^a) \cuc') 
. PT(Afi M2) = let PT(Mi) = \c,) , PT{M^) = (£2,^2 tc^) 

Eoid let they are disjoint in 
let {a;i, . . . , Xk] = dom(Ei) n dom[Y,2) and 
VI < i < fc VI < j < 2 : Cj e and 
rci,(a2 fe) = and 

U{ClXl) = h and 

f/(ii-i(a),i.-i(C2)) = ii and 
let t = ti o t2 o ... o tf; in 

(!''(t(Si)Ut(E2)),!^(t(!'^«) \c')) 

a,a,b are fresh variables. 

Table 5: The type inference algorithm PT. 



If S{\'^a ['0) is linear, then take A = and either T = {x : S{\"'a [0)} and = or 
e = {x: Sil^'a In,)} and T = 0. Otherwise choose T = G = 0, and A = {x : S(!"a ^0 
)}■ 

• M = Ax. P. This case follows directly by induction. 

• M = M1M2. Then PT{Mi) = PT{M2) = {^2,02), and Pr(M) = (S',6''), 
where 9' is defined as in Table [5l 

Let 5 be a scheme substitution defined on all the type schemes occurring in PT{M): 
note that, by the definition of the function U this implies that S is defined on both 
PT(Mi) and PT^A'h). Moreover, by construction of PT, x : Ci S (1 < i < 2) 
implies C/(Ci)C2) is defined, and S{Ci) = 'S'(C2), by Lemma [Ol 

By induction Fj | Aj | 0j h Mi : S{6i) (1 < i < 2). Note that every type derivation 
for M ends with an application of the rule (E^), followed by a sequence, may be 
be empty, of rule (!). Since in rule {E^) the two linear contexts are disjoint, we can 
build the partition of the contexts in the following way: 

Ti = {x : S{C) I ({x : 5(C)} C A (x G FV{Mi) A x ^ FV{M2)) A 

(5'(C) is linear )}, 

Ts = {x : 5(C) I {x : 5(C)} C 5(S2)A(x G FV{M2)Ax Fy(Mi))A(5(C) is hnear )}, 
Ai = {x: 5(C) I {{x : 5(C)} C 5(Si)) A (5(C) is modal )} and 
Gi = Si - (Ti U Ai) (l<i<2). 

By the weakening Lemma, we have that Fj | Ai, A2 [ Gi, G2 \~ Mi : S{9i) (1 < i < 2). 
Since S{9i) = 5(^2) —° 5(!'^a fcj)) (by Lemma lOl i). the proof follows by rule (E^). 
) By induction on the derivation proving F | A | h M : A. 
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Let the last used rule be (A^). Then M = x, and {x : A} C r. By definition, 
PT{x) = {{x :!"a !"a [0), and the proof follows easily. 
The case {A^) is similar. 

The cases {iLo) and {iL^) both follow by induction and weakening lemma. 

Let us consider the case when the last used rule is {E^). Then M = M1M2, and 
Ti I A I e h Ml : 5 ^ yl and r2 I A I e h M2 : B, for some B, where Ti and r2 are 
disjoint. By induction PT{Mi) = {T,i,Q) and there is Si defined on all type schemes 
in PT{Mi) such that 5i(Ci) = B ^ A, and 52(C2) = B. 

Moreover Si{T.i) C r^UAue (1 < z < 2). Since by construction PT{Mi) and PT{M2) 
are disjoint, there is a well defined scheme substitution S acting as both Si and 5*2 
and such that S{\"'a fg) = A, for a,o fresh. So if C2 = o" \c-, S{C,i) = S{a — olP^a \c)-, 
and S is defined on all the type schemes in PT{Mi) (1 < i < 2). Then by Lemma 
I6.31 ii). C/(Ci,o- -<i\P^a \c) = {s',C'). Since S satisfies all the constraints in PT{Mi) 
(1 < I < 2), if X : 6*1 and x : 62 belong to Si and T,2 respectively, then ^(^i) = S{62), 
and so, by Lemma I6.3[ ii). they can be unified. So PT{MiM2) is defined, and by 
induction it enjoys the desired properties. 

Let the last used rule be (!). Then A =\A' and the premise of the rule is T' | A' [ 
e' h M : A', where !r'u!A'u!e' C A. By induction PT{M) = (S,C) and there is a 
scheme substitution S' such that S"(S) C T' U A' U 0'. Let S be such that S is defined 
on all the type schemes in PT{M), and such that S{Q =\S'{Q, for all type scheme 
it is easy to check that, if S' is defined, i.e., it satisfies all the constraints in PT{M), 
than S is well defined too, and so it does the right job. □ 

The complexity of the type inference algorithm PT is of the same order as the type inference 
algorithm for simple types. In order to prove this, we need some notations. If A{n) is 
an algorithm running on a datum n, let us denote by |j4(n)| its asymptotic complexity. 
Moreover, if ex is a scheme, let |cj| be the number of symbols in it. Let TA{M) be the type 
inference algorithm for simple types running on a term M. By abuse of notation, we assume 
that, for every type scheme a, a denotes a simple type: in fact the syntax of type schemes, 
when erasing exponentials and constraints, coincides with that of simple types. 

Theorem 6.5 (Complexity). PT{M) G 0{L{M) + \TA{M)\). 

Proof. First of all, let us observe that the the unification algorithm U coincide with the 
Robinson unification, when it is applied to two type schemes whose set of constraints is 
empty, so, if RU denotes the Robinson's unification, \U{a f0,r fg)! = \RU{a,T)\. Then 
{Uic \c,T \c')\ ^ 1-^^(0", t)| + |(t| + |t|. Remember that Robinson unification is equivalent to 
the principal simple type assignment. Moreover it is easy to see that, if PT{M) = (E, a \c), 
then TA(M) = when S denotes the context obtained from S by applying the function 

[.] to all types in it. 

The proof is by induction on M. If M is a constant the proof is trivial. If M = Xx.N, 
then |Pr(M)| = |Pr(iV)| + \U{t \c, fa>o)| = \PT{N)\ + k, for a constant k, since a is 
a scheme variable. Then the result follows by induction. Let M = PQ. Then \PT{PQ)\ = 
\PT{P)\ + |Pr(Q)| + \Uia \c,iT ^l-a) \c')\ + |^7(Si,S2)| if PT{P) = (Si, a \c) and 
PT{Q) = {Ti2,T \c')- f^(Si,S2) is an abbreviation for the unification of the two scheme 
contexts Si and S2, as specified in the algorithm. By induction PT{PQ) = \TA{P)\ + 
ki + \TA{Q)\ + k2 + \RU{a,T)\ + \a\ + |r| + |i?C/(S7, S^) + jSi| + [Saj. Remembering that 
|r^(PQ)| = \ TA{P)\ + \TA{Q)\ + \RU{a,T)\ + li?C/(ST, S^)|, the result follows. □ 
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Example 6.6. Let us illustrate the application of the type inference algorithm to the term: 

2 3 = {\xy.x{xy))\xy.x{x{xy)). 

Let a,b,c,d,e,f,g,h,k,i,m,n,p,q,r be literals and a,/3,7, 5, e be scheme variables. First 
we will build PT(2). Starting from 

PT{x) = {{x :ra k},ra k) and PT{y) = {{y :\'l3 k},\'(3 \^), 

due to U{\^a \q, ^!^7 [0) = {[a ^1^(3 ^1^7], {a = 0}), we obtain: 

PTixy) = {{x :!^+-(!^/?^!-7) \c„y :!'^+^/? b,},!^+"7 \co) 

where Cq = {a = 0}. 

Now a fresh version of PT{x) is needed, so consider ({x ■.\°'^ai ["0}, I'^^qi fg). The rule 
for application allows us to perform certain unifications. First we obtain 

where Ci = {ai = 0}. A second unification is necessary for unifying the two premises on x 
in the first component of PT(xy) and PT{x), respectively: 

where C2 = {ai = a + d}. By composing the two substitutions, we have ([7 1— > /?, 7 1— > 
5], {c + d = b, e = c}) . So 

PTixixy)) = {{x :!'^+'^H!'/? ^'-'P) tCa, 2/ balJ'^'^/? tCa) 

where C3 = Co U Ci U C2 U {c + d = 6, c = e}. By applying the rule for the abstraction, we 
obtain: 

PT{\y.xixy)) = {{x :!^(!''/3 ^fp) fcs), ^l^'+'P) \c,) 

and 

PT{Xxy.x{xy)) = (0; ^l*^/?) \c^) 

where C4 = ^3 U {/ = A; + /i + ai, / > 0}. 

Due to the particular form of PT{Xxy.x{xy)), we can deduce that the term \xy.x{xy) 
can be assigned, among others, the following types 

\{A A) ^\{A A), \{A A) ^\A ^\A, \\{A A) ^\{\A ^\A). 

In particular, the scheme substitution that replaces P hy 1{A —o A), furthermore b, e, h, 
d and ai by 0, and both k and / by 1, satisfies the constraints and generates the typing 
I I h 2 :!(A A) -<^\{A A), whose derivation is shown in Example [Ol 

In order to build the principal type scheme of 3, we need to start from two fresh copies 
of PT(x) and PT{x{xy)), let 

{{x :!-e r0},!"e k) and {{x :!'^'+<(!*'a -^\'' a) t^^, y :!'^'+'''+^'a tc^}, I^'+'^'a \aj 

where = {a' = 0, a[ = 0, a[ = d' + a', b' = d + d', e' = c'}. 

By applying the rule for application, we obtain, for the first unification: 

where C5 = {n = 0}. By unifying the two premises on x, we have 

i7(!"6 k,\'''+<(\''a^f'a) 1^,) = {[e a ^f' a],Ce) 
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where Cq = {n = h' + a'l}. So, composing the two substitutions: 

PT{x{x{xy))) = {{x ■.\'^+^'+<(\'>'a ^l^' a) tc., y :!^+''+''+''a fcj,!^+^a \cr) 

where C7 = C3 U C5 U Cg U {b' = h' + e' , e' = p}. So, by applying the rules for abstraction, 
we have: 

PTiXy.x{xixy))) = {{x a ^l'' a) ^7}, !"(!'^+'''+''+''« ^l^'^'a) \cr) 

and 

PT{Xxy.x{x{xy))) = (0, !^(!3(!'''a ^f' a) {1'^+''' +'^' a ^I^+^q)) \cs) 
where Cg = Cj U {g = r + q + h' + a[, g > 0}. 

It is easy, but boring, to check that the typings for 3 are the same that the ones for 2, 
by inspecting the modality set. Now, in order to build PT{2 3), we need to unify the two 
type schemes: 

and 

obtaining: 

where Cg = {i = 0,k + h + ai = s,t = k,s = k + h + ai,b = g,e = r,b' = q + h' + b' + d',e = 
p + q}. So 

Pr(2 3) = (0,!*(!^+^+^(!'''a ^l^'a) ^!'^+"(!^'a ^!"'a)) \cj 
where Cio = Cs U Cg. 

Finally, the scheme substitution that replaces a by A, furthermore 6, e, b' and e' by 0, 
and both t and /i by 1, satisfies the constraints and generates the typing | | h 2 3 : 
1{1{A —o A) — o!(A A)), whose derivation is shown in Example I4.2i 



7. Achieving completeness 

The type-system we introduced in this paper is not complete for the class of elementary 
time functions, at least if we restrict to uniform encodings. Indeed, simply typed lambda- 
calculus without constants is itself incomplete with respect to any reasonable complexity 
class (see, for example, [121) ■ order to achieve completeness, two different extensions of 
the system can be built, one adjoining basic types and constants, and the other adjoining 
second order types. In this section we will briefly discuss these two solutions. 

7.1. Basic Types and Constants. Let us fix a finite set of free algebras A = {Ai, . . . , A„}. 
The constructors of A, will be denoted as c^. , . . . ,c^^^\ The arity of constructor will 
be denoted as • '^^^ algebra U of unary integers has two constructors cjj,c^, where 
TZjj = 1 and TZ^ = 0. The languages of types, terms and values are extended by the the 
following productions 

A ■■= Aj 

M ::= iterAj \ cond^^ \ d^. 

V ::= iterA, V^_^ I condA, I 4, 

k times k times / times 
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where Aj ranges over A, i ranges over {1, . . . , k{Aj)} and k ranges over {0, . . . , A;(Aj)} and 
/ ranges over {0, . . . , "^a^ }• If t is a term of the free algebra A and Mi, . . . , M^^^) terms, 
then t{Mi, . . . , M;.^^)} is defined by induction on t: {c\ti . . . t^^){Mi, . . . , M^^^)} ^ill be 

Mi{ti{Mi, Mfc(A)}) . . . [tniiMi, . . . ,Mfc(A)}). 
The new constants receive the fohowing types in any context: 

iterA : A ^1{ A . . . ^ A ^ A) ^ . . . ^1{ A ^ . . . ^ A ^ A) ^\A 

^^'^es 7^^(A) times 

condA ■■ A ( A ^ . . ■ A A) ^ . . . ^ ( A . . . A A) ^ A 
^A 7^i^*^ iimes 

ci : A ^ ■ . . ^ A ^ A 

New (call-by-value) reduction rules are the following ones: 

iterAtVi...Vk(^A) -^v H^i • • • ^fc(A)} 
condAc\{ti . . .tT^^)Vi . . .V^A) -^v K^l•••^7^^ 
It is easy to check that Lemma 15.81 holds in the presence of the new constants. Moreover: 
Proposition 7.1. Every typable closed normal form is a value. 

Proof. By induction on the structure of a normal form M: 

• A variable is not closed. 

• If M is an abstraction, then it is a value by definition. 

• If M is a constant, then it is a value by definition. 

• If M is an application NL, then \- N : A —o B and \- L : A. By induction, N and L 
are both values and, as a consequence, N cannot be a variable nor an abstraction. So, 

must be obtained from one of the new productions for values; let us distinguish some 
cases: 

— If = iterAjVi ■ ■ - Vk with k < k{Aj), then M is a value itself. 

— If A" = iterAjVi . . . V^^^ )> then M is a redex, because Vi is a closed value with type 
A,. 

— If A^ = cond AjVi ■ ■ - Vk with k < k{Aj), then M is a value itself. 

— If A^ = condAjVi . . . Vfc(A )) then M is a redex, because is a closed value with type 
A,. 

— If A^ = c^ , Vi . . . Vfc, then k < TZ\, because A" has an arrow type. As a consequence, 
M is a value. 

This concludes the proof. □ 

We can prove the following theorem: 

Theorem 7.2. There is a finite set of free algebras A including the algebra U of unary 
integers such that for every elementary function / : N — > N, there is a term Mf : U ^I'^U 
such that Mf [n] — >* \f{u)1 (where [n] is the term in U corresponding to the natural number 
n). 
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Proof. We will show that if / : N ^ N is computable by a Turing Machine A4 running 
in elementary time, then there is a term Mf representing that same function. First of 
all, will contain a free algebra C with four constructors cj^, c^, c^, having arities 
TZj^ = 4,7^^ = l,7^c ~ Ij'^c ~ 0- Constructors ,c^,c^,c^ can be used to build binary 
strings and a configuration will correspond to a term C({^tit2^3^4 where ti represent the 
current state, t2 represents the current symbol, represents the left-hand side of the tape 
and ^4 represents the right-hand side of the tape. A closed term trans : C ^ C encoding 
the transition function can be built using, in particular, the new constant condc- Iteration, 
on the other hand, helps when writing init : U ^!C (whose purpose is to translate a unary 
integer t into the initial configuration of A4 for t) and final : C — o!U (which extracts a 
unary integer from the final configuration of M). In this way, the so-called qualitative part 
of the encoding can be done. The quantitative part, on the other hand, can be encoded as 
follows. We will show there are terms tower^ : U —ol'^'^U such that tower" [m] — >* [2„(m)] 
where 2o{m) = m and 2n+i{m) = 2^"*^™) for every n > 0. We will prove the existence of 
such terms by induction on n. tower^ : U ^ U is simply the identity Ax. a;. Consider now 
the term 

exp = Xx.iterux{XyXz.y{yz)){Xy.cljy) : U ^!!(U U) 
We now prove that for every m G N, exp\m'\ Vm where Vm is a value such that 
Vm [p] — >^ [2'" + p] for every p G N. We go by induction on m. If m = 0, then 

exp\m] ^* (Ax.cjjx) 
and (Ax.cjjx)[p] [1 + p] = [2'" +p]. If m > 0, then 

exp\m] ^* {Xx.Xy.x{xy))Vm~-i Xy.Vrn-iiVm-iy) 

and 

Xy.Vm^i{V^-iy)\p'] ^:K„_i [2—1+^1 -^l [2^-1 + 2—1 +pl ^ \2^+p] 
tower^ is 

Xx.{Xy.tower^^^y){{Xz.z\0]){exp x)) 
Finally, we need terms coerc^ : U — >!"U such that coerc^\m~\ — >* [m]. coerc^ is simply the 
identity, while coerc" is Xx.iteri]Xclj{Xx.c'^x) for every n > 1. We can suppose there is d 
such that Ai performs at most 2ii{n) steps processing any input of length n. The term Alf 
encoding / will then be: 

Xx.{Xy .final y){{Xz.Xv.iter\} z trans {init v)){coerc'^'^ x){tower'^ x)) 

This concludes the proof. □ 

For the extended system a principal type property can be proved, extending the algo- 
rithm defined in Table [5] in order to take into account the new constants. Clearly, the system 
can further be extended with other constants without losing its nice properties, provided 
Lemma 15.81 is satisfied. 
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7.2. Restricted Second Order Quantification. If we had the fuh power of second-order 
quantification in ETAS, we would easily found a counterexample to Substitution Lemma 
and, as a consequence, to Subject Reduction. Consider the following type derivation: 

X : Va.a | | h x : Va.a 
x-.ya.a I I h x :!/? 

This shows we would be able to give type !/? to the variable x, but without using any 
instance of rule !. This undermines any hope to prove subject reduction in presence of 
types like Va.a. The same holds when we have types in the form Va.!A. Restricting second 
order quantification to arrow types (and, recursively, to second-order types) allows us to 
preserve all results we proved in sections H] and [5j 

Formally, a subclass of formulae can be defined by the following two productions 

S ::= A^A \ Va.5 
and the following rules are added to the type system: 
rlAiehM:^ a ^ FV(T)U FV{A)U FV{e) T | A | 9 h M : Va.S" 

r I A I e h M : Va.5 F | A | G h M : S{A/a} 

As can be easily checked. Theorem 14.61 and Theorem 15 . 1 II still hold. 

Type inference in presence of second order is at least problematic |17j . We conjecture that, 
even if second order quantification is the restricted one described here, decidability of the 
type inference is lost. 



8. Extensions to other Logics 

We believe the approach described in this paper to be applicable to other logics besides 
Elementary Affine Logic. Two examples are Light Afiine Logic [l] and Soft Affine Logic [5j. 
Light Affine Logic needs an additional modality, denoted with §. So, there will be two 
modal rules: 

Fi I Ai I h Af : yl lFil + lAi|<l 
F2 |!Fi,!Ai,A2 \ Q2^M:\A ' 
Fi,F2 I Ai,A2A3 |GiG2hM:A 



§Fi,§Ai,F4 |!F2,!A2,!Gi,A4 | §G2, §A3, Q4 h M : §A ' 
Notice that we do not need an additional context for the new paragraph modality, since 
contraction on formulae like §^4 is not allowed. 

Soft Affine Logic is even simpler than elementary affine logic: there is just one modality 
and the context is split into just two sub-contexts. The ! rule becomes: 

Fi I Ai h M : yl 
!Fi,F2 |!Ai,A2hM:!A ' 

However, the contraction in SAL is deeply different from the one in EAL and LAL. In 
particular the formula \A —o\A(!()\A is not provable anymore and is "replaced" by 

\A^ A® ■■■ ®A. 



n times 
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In the type system the axiom above is reflected by the following two rules: 
T \ A,x : Ah M : B F \ x : A, A h M : B 

r I A,x:\A h M : B T,x :\A \ Ah M : B 

Notice that the analogous of Shifting Lemma (Lemma 14.41 of Section H]) stating that every 
formula in left context can be shifted to the right one holds in this case too. 

9. Conclusions 

We presented a type system for the call-by-value lambda-calculus, called ETAS, de- 
signed from Elementary Affine Logic and enjoying subject reduction and elementary time 
normalization. Inference of principal types can be done in polynomial time thanks to the 
fact that the type system is almost syntax directed. We believe the approach to be ex- 
tendible to other systems besides EAL, in particular to Light Affine Logic and Soft Affine 
Logic (as sketched in Section [8|). Moreover, we show that adding constants for iteration 
makes the system (extensionally) complete for elementary time, without altering its good 
properties. We briefly discuss also the problem of extending the system with second order. 
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